Static task
static1
Behavioral task
behavioral1
Sample
907ce19933161bf10916466ebb81bd12b6ae67a7f9169a903d305a6f427d096a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
907ce19933161bf10916466ebb81bd12b6ae67a7f9169a903d305a6f427d096a.exe
Resource
win10v2004-20221111-en
General
-
Target
907ce19933161bf10916466ebb81bd12b6ae67a7f9169a903d305a6f427d096a
-
Size
151KB
-
MD5
51f49d416dff59eb21016aa915e30de2
-
SHA1
c593871adbd0680cd7d194337172107889c60b5f
-
SHA256
907ce19933161bf10916466ebb81bd12b6ae67a7f9169a903d305a6f427d096a
-
SHA512
bc0bbc5398eadb1e822bb2390cafae42669de8b50b6e6e23c8fab67e910c01126b8db03dbd58861688de3b69c9b81ffd4f06257f6be03dda62c8679c5731024f
-
SSDEEP
1536:OYvsDjDgarjxMx6ylM+9xbOUuUg64qIxhmcuudTw+jNfpTrFcAPpDs7/eeumv6t/:OUKgOs6p+KTxhVuu9pTDm7Emv3RfaR
Malware Config
Signatures
Files
-
907ce19933161bf10916466ebb81bd12b6ae67a7f9169a903d305a6f427d096a.exe windows x86
89dee2b26dbc963d92f60d65f9ab10b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExA
GetConsoleCursorInfo
GetStartupInfoA
GetConsoleTitleW
FindFirstFileA
GetModuleHandleA
DeleteFileA
ExitThread
SetSystemTime
CreateEventA
FindFirstFileExA
TransactNamedPipe
GetCurrentProcessId
user32
CharUpperBuffA
WinHelpW
AllowSetForegroundWindow
IsWindowUnicode
IsWindowEnabled
GetScrollInfo
MapWindowPoints
EmptyClipboard
DdeConnect
LoadCursorFromFileA
SetShellWindow
msvcrt
_exit
_acmdln
_controlfp
_except_handler3
__p__fmode
exit
__set_app_type
__getmainargs
__p__commode
_initterm
_XcptFilter
_adjust_fdiv
memcpy
__setusermatherr
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ